General
- Target 2026-08-03_67f1c6853565b7b1acc2bc1d1604d802_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- Sample260803-wjmgvsdc63
- SHA256 383c1cd377a4836edc6dafbd016d18eff095480b92f60cbc54c5b8598af97ee7
- MD5 67f1c6853565b7b1acc2bc1d1604d802
- SHA1 74ae0199165d28b52bd01570ef4a6ad9bfe0fbbe
- SHA512 baebbd2a1e5d9915295a8ef70d8ced9a50231db77444d2b3f0aef658d90916ae9757c33915cd013a3fb60f9631ec62d9cabc0355004ed5a7d8a9ca01e39455fc
- SSDEEP 3072:vbuMGq4hOSOVFjsvy+nUcrI8Rh4HenShL5vyzaWuNcFtI7P:TGq4sHVVsnPr5h4Hec5vP+U7P
- TLSH T1D4E3E0267E518431E26225309DA4D1B3E66BB961177841CBB78C2FBE9F206C15F3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_67f1c6853565b7b1acc2bc1d1604d802_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_67f1c6853565b7b1acc2bc1d1604d802_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_67f1c6853565b7b1acc2bc1d1604d802_amadey_elex_rhadamanthys_smoke-loader_stop_tofsee
- Size 149KB
- SHA256 383c1cd377a4836edc6dafbd016d18eff095480b92f60cbc54c5b8598af97ee7
- MD5 67f1c6853565b7b1acc2bc1d1604d802
- SHA1 74ae0199165d28b52bd01570ef4a6ad9bfe0fbbe
- SHA512 baebbd2a1e5d9915295a8ef70d8ced9a50231db77444d2b3f0aef658d90916ae9757c33915cd013a3fb60f9631ec62d9cabc0355004ed5a7d8a9ca01e39455fc
- SSDEEP 3072:vbuMGq4hOSOVFjsvy+nUcrI8Rh4HenShL5vyzaWuNcFtI7P:TGq4sHVVsnPr5h4Hec5vP+U7P
- TLSH T1D4E3E0267E518431E26225309DA4D1B3E66BB961177841CBB78C2FBE9F206C15F3836F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Suspicious use of SetThreadContext